CVE-2025-54957
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dolby Digital Plus Audio Decoder是美国杜比（Dolby）实验室的一个音频编解码技术。 Dolby Digital Plus Audio Decoder存在安全漏洞，该漏洞源于整数溢出，可能导致远程执行代码。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-54957
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution data is processed by evo_priv.c from the DD+ bitstream, the decoder writes that data into a buffer. The length calculation for a write can overflow due to an integer wraparound. This can lead to the allocated buffer being too small, and the out-of-bounds check of the subsequent write to be ineffective, leading to an out-of-bounds write.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Dolby Digital Plus Audio Decoder 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dolby Digital Plus Audio Decoder是美国杜比（Dolby）实验室的一个音频编解码技术。 Dolby Digital Plus Audio Decoder存在安全漏洞，该漏洞源于整数溢出，可能导致远程执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-54957
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | CVE-2025-54957 | https://github.com/AlphabugX/CVE-2025-54957 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-54957
请登录查看更多情报信息。
Same Patch Batch · n/a · 2025-10-20 · 19 CVEs total
| CVE-2025-48025 | SAMSUNG Exynos 安全漏洞 | |
| CVE-2025-54764 | Mbed TLS 安全漏洞 | |
| CVE-2025-61301 | CAPE 安全漏洞 | |
| CVE-2025-61303 | Recorded Future Triage 安全漏洞 | |
| CVE-2025-60783 | Restaurant-Management-System-DBMS-project 安全漏洞 | |
| CVE-2025-60781 | PHP Education Management 安全漏洞 | |
| CVE-2025-61488 | SLiMS 9 Bulian 安全漏洞 | |
| CVE-2025-60856 | Reolink Video Doorbell WiFi DB_566128M5MP_W 安全漏洞 | |
| CVE-2024-55568 | SAMSUNG多款产品 安全漏洞 | |
| CVE-2025-56219 | SigningHub 安全漏洞 | |
| CVE-2025-26782 | SAMSUNG多款产品 安全漏洞 | |
| CVE-2025-26781 | SAMSUNG多款产品 安全漏洞 | |
| CVE-2025-61417 | TastyIgniter 安全漏洞 | |
| CVE-2025-61456 | E-commerce 安全漏洞 | |
| CVE-2025-61455 | E-commerce 安全漏洞 | |
| CVE-2025-61454 | E-commerce 安全漏洞 | |
| CVE-2025-56223 | SigningHub 安全漏洞 | |
| CVE-2025-56224 | SigningHub 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-54957
No comments yet